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ABSTRACT 

Security for the data which is stored on the cloud by 
user is very important issue. User may expect some 
security for their data from the cloud service provider, 
there can be serious issues concerning data security 
between user and service provider. To solve this kind 
of issues, we can use third party as an auditor. Here 
we have analyzed different ways to ensure secure data 
storage in cloud. We are going to provide the security 
to the user’s data by using encryption technique. For 
this we are using the Advanced Encryption Standard 
algorithm for encryption and decryption. But when 
Cloud Service Provider has both encryption and 
decryption keys, there is threat to security and privacy 
of data. CSP may pass the user data without user’s 
knowledge. For auditing we are introducing Third 
Party Auditor. Here the data will be encrypted at user 
side and will be in encrypted form over network and 
to TP A. TPA will verify the data before storing it on 
the cloud. There are large numbers of users of cloud 
computing who are accessing and modifying the data 
and they need the reliable service provider who can 
provide complete security for their data. So the TPA 
will audit the data and check the data integrity of 
client’s data. Hence user will have more elaborated 
view over his data privacy. 

Keywords: Cloud Computing, Attribute based 
encryption, Key policy, ciphertext policy, 
hierarchical-ABE 

1. Introduction 

In the network technology online data allotment has 
become a new pet, such as MySpace, Facebook .For 
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now, the cloud computing is one of the most able 
applications platforms to solve the unstable expanding 
of data sharing along network. Computing technology 
increase by cloud computing that uses Internet. It 
consists of the use of computing assets. That are 
delivered as a service to give access to their data for 
storing and performing the preferred business 
operations, hence cloud service provider must provide 
the trust and security. There is valuable and most 
sensitive data in vast amount stored on the clouds. 
There are concerns about scalable, flexible and the 
fine grained access control in the cloud computing 
technology. For this intention there have been many 
of the related schemes that are proposed for purpose 
of encryption. Such as simple encryption technique 
that is typically studied. Hence we are going to 
discuss about Attribute Based Encryption schemes 
and how this scheme has been developed and also 
modified further into key policy. The cloud 
computing technique has rapidly become a very 
widely adopted standard for delivering services over 
the internet. Therefore, cloud services provider must 
provide the trust and security, as there is sensitive and 
important data in large amount stored on clouds. For 
protecting the privacy of the stored data, the data must 
be encrypted before uploading to the cloud by using 
some cryptographic algorithms. In this paper we 
going to discuss about attribute based encryption 
scheme and its categories. Cipher text policy attribute 
based encryption is one of possible schemes which 
has much more appropriate and more flexible for 
general application authority accepts the user 
enrolment and creates some parameters. By the User 
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downloads and decrypts the interested cipher text 
from the cloud server provider. The shared files are 
usually have hierarchical structure. That’s a group of 
files are divided into a many number of hierarchy 
subgroups located at different access levels. If the 
files in the same hierarchical structure could be 
encrypted by an integrated access structure, the 
storage cost of ciphertext time and cost of encryption 
could be saved. So, an access structure could be 
shared by the two files. Moreover, transport nodes 
are added in the given access structure, so users can 
decrypt all authorization files with computation of 
secret key once. The computation cost of decryption 
can also be reduced if users need to decrypt numerous 
files at the same time. 

2. Literature Review 

Atenieseet al. are the first to consider public 
auditability in their defined “provable data 
possession” model for ensuring possession of data 
files on untrusted storages. Their scheme utilizes the 
RSA-based homomorphic authenticators for auditing 
outsourced data and suggests randomly sampling a 
few blocks of the file. However, the public 
auditability in their scheme demands the linear 
combination of sampled blocks exposed to external 
auditor. When used directly, their protocolis not 
provably privacy preserving, and thus may leak user 
data information to the auditor. Juelse/ al. describe a 
“proof of retrievability” (PoR) model, where spot¬ 
checking and error correcting codes are used to ensure 
both “possession” and “retrievability” of data files on 
remote archive service systems. However, the number 
of audit challenges a user can perform is a fixed 
priori, and public auditability is not supported in their 
main scheme. Sahai and Waters proposed fuzzy 
Identity-Based Encryption (IBE) in 2005, which was 
the prototype of ABE.[3] Latterly, a variant of ABE 
named CP-ABE was proposed. Wan et al. proposed 
hierarchical ABE scheme. Later, Zou gave a 
hierarchical ABE scheme, while the length of secret 
key is linear with the order of the attribute set. A 
ciphertext policy hierarchical ABE scheme with short 
ciphertext is also studied in . In these schemes, the 
parent authorization domain governs its child 
authorization domains and a top-level authorization 
domain creates secret key of the next-level domain. 
The work of key creation is distributed on multiple 
authorization domains and the burden of key authority 
centeris lightened. At present, there are three types of 
access structures AND gate, access tree, and linear 
secret sharing scheme (LSSS) used in existing CP- 


ABE schemes. Cheung and Newport first used AND 
gate access structure to achieve CP-ABE scheme. 
Later, some improved schemes are proposed. 
Meanwhile, there are CP-ABE schemes based on 
access tree that support AND, OR, and threshold, and 
based on LSSS where and are the typical schemes of 
access tree and LSSS. Other CP-ABE schemes with 
specific features have been presented. For example, 
Hur proposed a data sharing scheme to solve the 
problem of key escrow by using an escrow free key 
issuing protocol between the key generation center 
and the data storing center. Green et al. and Lai et al 
.proposed CP-ABE schemes with outsourced 
decryption to reduce the workload of the decryption 
user. And Fan et al .proposed an arbitrary-state ABE 
scheme to solve the problem of the dynamic 
membership management. In addition, Guo et al. [15] 
proposed a novel constant-size decryption key CP- 
ABE scheme for storage-constrained devices. Shah et 
al. propose allowing a TPA to keep online storage 
honest by first encrypting the data then sending a 
number of pre-computed symmetric-keyed hashes 
over the encrypted data to the auditor. The auditor 
verifies both the integrity of the data file and the 
server’s possession of apreviously committed 
decryption key. This scheme only works for encrypted 
files, and it suffers from the auditor state fulness and 
bounded usage, which may potentially bring in on¬ 
line burden to users when the keyed hashes are used 
up. In other related work, Ateniese et al. propose a 
partially dynamic version of the prior PDP scheme, 
using only symmetric key cryptography but with a 
bounded number of audits. 

3. Design Goal 

For find out ranked search for effective operation of 
outsourced cloud data under the mentioned model, our 
system design should simultaneously realize security 
and performance guarantees as follows. 

1. Efficiency : This also perform privacy should be 
achieved with low communication and computation 
overhead. 

2. Multi - keyword Ranked Search : To implements 
search schemes which access multi - keyword query 
and provide result comparison ranking for effective 
data retrieval. 


@ IJTSRD | AvailableOnline@www.ijtsrd.coml Volume-2 | Issue-3 |Mar-Apr2018 


Page: 416 



International Journal of Trend in Scientific Research and Development (IJTSRD) ISSN: 2456-6470 



Fig.l: An example of secure data sharing in cloud 
computing. 


4. Proposed Work 
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